search

Azure-Samples / contoso-real-estate

Intelligent enterprise-grade reference architecture for JavaScript, featuring OpenAI integration, Azure Developer CLI template and Playwright tests.
MIT License
889 stars 528 forks source link

[Question] : Read-only access to deployed resources #351

Closed dfberry closed 1 year ago

dfberry commented 1 year ago

Does the engineer who deployed (az deploy) have read-only access to the resources to the point they can look at the secrets, database tables, etc?

manekinekko commented 1 year ago

I assume you meant azd deploy?

@savannahostrowski correct me if I am wrong, to my understanding, since the engineer needs to be logged in before deploying (azd login), then should have read/write access by default to all ressources. Is that correct?

savannahostrowski commented 1 year ago

Yep - they'll need to run azd auth login and then have a contributor role on the subscription.

manekinekko commented 1 year ago

@dfberry does that answers your question?